Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/ruby-openid@2.2.2
purl pkg:gem/ruby-openid@2.2.2
Next non-vulnerable version 2.9.1
Latest non-vulnerable version 2.9.1
Risk
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-3r3w-8fxp-87ej
Aliases:
CVE-2019-11027
GHSA-fqfj-cmh6-hj49
A vulnerability in OpenID library for Ruby at worst might allow an attacker to bypass authentication.
2.9.0
Affected by 0 other vulnerabilities.
2.9.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-b79j-puq4-zbe8 A vulnerability in Ruby OpenID may lead to Denial of Service. CVE-2013-1812
GHSA-6c8p-qphv-668v

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-12T17:12:05.489272+00:00 GitLab Importer Affected by VCID-3r3w-8fxp-87ej https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/ruby-openid/CVE-2019-11027.yml 38.6.0
2026-06-12T15:39:03.520472+00:00 GitLab Importer Fixing VCID-b79j-puq4-zbe8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/ruby-openid/CVE-2013-1812.yml 38.6.0
2026-06-12T07:52:11.793966+00:00 GithubOSV Importer Fixing VCID-b79j-puq4-zbe8 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2017/10/GHSA-6c8p-qphv-668v/GHSA-6c8p-qphv-668v.json 38.6.0
2026-06-11T20:23:51.339484+00:00 GHSA Importer Fixing VCID-b79j-puq4-zbe8 https://github.com/advisories/GHSA-6c8p-qphv-668v 38.6.0